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Description 

PROTECTION SYSTEM AND METHOD 
AGAINST SHORT-CIRCUITS IN ELECTRIC 
POWER DISTRIBUTION ARCHITECTURES 
AT TWO VOLTAGE LEVELS 

Background of Invention 
[0001] Field of the Invention: 

[0002] The present invention refers to a protection system 

against short-circuits in an electric power distribution ar- 
chitecture comprising at least a first battery Bl at a first 
voltage level, and a second battery B2 at a second, higher 
voltage level. Both batteries Bl and B2 or voltage sources, 
are provided with an automatic disconnection device and 
intended for a differentiated electric power supply to re- 
spective network sectors provided with corresponding 
power distribution units to the loads, each one controlled 
by a respective microcontroller, said first battery Bl and 
sector or sectors it supplies being susceptible of being 



supplied in turn from the second battery B2 at a higher 
voltage level, through a converter DC/DC, said battery B2 
being connected to a voltage generator. Said converter 
can be a one-way or a two-way converter. 

[0003] The invention is applicable to electric power distribution 
networks and/or architectures with parts or sectors at two 
voltage levels, in particular, used in the automotive field, 
known as "dual voltage" and hereinafter referred to as DV. 

[0004] The invention also refers to a method for implementing 
said system, comprising a series of protection processes 
against short-circuits carried out by said power distribu- 
tion units, operating in a controlled manner and generally 
controlled from a centralized, short-circuit detecting cen- 
ter. Said short-circuit protection procedures essentially 
comprise a detection process by means of an action on 
the different network loads, especially on those power 
loads susceptible of being involved in the short-circuit 
situation. 

[0005] Additionally, the invention falls within the electric power 
distribution architectures implemented on the basis of 
power sectorisation, according to which principle they are 
defined in the network, e.g. a series of areas installed in a 
vehicle, existing in each one of them an intelligent node 



(power distribution unit or box with a management micro- 
controller) that locally controls the loads and switches, 
protection devices and/or sensors associated to the same, 
which intelligent nodes are adapted to send and receive 
information through a multiplexed data bus, which allows 
for a great reduction not only of the number of cables but 
also in their length, not forgetting the decrease in the 
number of cables that go from one area to another of the 
vehicle, the parameter of which has great influence in the 
ease of assembly of the wiring and in minimizing the risk 
of short-circuits due to the applied physical protections. 
[0006] Background of the Invention: 

[0007] dv systems and particularly those implemented in vehi- 
cles, typically comprise a first network at 14V used to feed 
low demand loads, supplied from a battery Bl or from a 
second network at a higher voltage, typically 42V, through 
a one-way or two-way electrical converter DC/DC. On its 
part, said second 42V network is used to feed high de- 
mand loads such as the starter, the heating system, the 
electromagnetic valve control, motors, such as those of 
the window opening mechanisms, position adjustment, 
fans, etc., and is fed from a generator G (the vehicle's al- 
ternator) or from a second battery B2. 



[0008] dv systems particularly for vehicles are described in nu- 
merous patent and patent application documents, it being 
possible to mention the following ones: US 5334926, US 
6232674, EP 337155, EP 539982, EP 1033804, WO 
99/22434 and WO 00/76812. 

[0009] D ue to the coexistence of both power networks at differ- 
ent voltage levels, a new problem related to the safety of 
the system is added with regards to the usual positive 
grounding short-circuits. Said problem relates to the pos- 
sibility that, in the automobile sector example explained, 
some eventual short-circuits between the +14V and +42V 
positives occur. The traditional protection approaches ap- 
plied to date cannot totally ensure safety in DV architec- 
tures, wherein consequences can be much more danger- 
ous, with the risk of explosion of battery Bl at a lower 
voltage level and/or of fire in part of the affected network, 
susceptible of propagating. 

[0010] There are essentially two types of protection against 

short-circuits in DV architectures. The first and more eco- 
nomic one is mechanical, affecting the protection of the 
wiring, of the network itself, and its design and routing. 
The mechanical isolation can thus be intensified in the 
scope of the components (fuses near the batteries, ar- 



rangement of the two batteries at spaced points, differen- 
tiated and sealed connectors, lids for threaded terminals, 
etc.) and, with regard to the distribution lines themselves, 
a suitable dimensioning of the cables and a suitable isola- 
tion between themselves and, in the case of the automo- 
bile, a separation of the spans at different voltage levels, 
especially of those areas susceptible of receiving an im- 
pact by e.g. a shock, can be proceeded with. 

[0011] The second class of protection is active (electrical) y it is 
based in some current measurements at different points 
of the network that allow for sensing when a fault occurs. 
The invention falls within this second field and has the 
advantage of using some electronic modules, mainly as- 
sociated to the battery at a lower voltage level, having an 
important role because controls all services to the net- 
work at a higher voltage level (in the referred example, 
the one at 42V) and establishes communication with the 
rest of the system to receive/send some suitable parame- 
ters related to some potential short-circuit situations. 

[0012] Patent application PCT ES00/00393, from the applicant it- 
self, discloses a modular assembly connectable to a bat- 
tery, for supervision of its state and protection, including 
a series of electronic modules comprising a first module 



BD applied to a disconnection of the power supply from 
said battery, a second module BM applied to a dynamic 
measure of the states of charge (SOC) and health (SOH) of 
the battery, according to the technology disclosed in the 
Spanish patent application P 200003143, also from the 
applicant itself, based on determining the electrochemical 
impedance of the battery, and a third module LCM des- 
tined to a control and management of the loads fed by 
said battery. But said modular assembly is not equipped 
nor provided for the methodology shown in this invention. 

[0013] other documents of interest with regard with the field of 
the invention are patents US 159257, US 6281631 and WO 
98/54811. 

[0014] B r j e f Disclosure of the Invention: 

[0015] During a short-circuit between power supply sources or 
batteries, current flows from battery B2 at a higher volt- 
age level to battery Bl through the path of the short-cir- 
cuit. The resistance of the cables involved is usually be- 
tween 50 mOhm and 300 mOhm, so that the currents may 
range between 480 A and 80 A (being possible even lower 
currents, depending on the physical elements involved in 
parallel). This overcurrent can blow some of the fuses, so 
that it is possible that the short-circuit then disappears or 



that it may burn the cables or even that it may cause the 
explosion of the lower-voltage-level battery Bl. 
[0016] The required steps for identification of a short-circuit 

avoiding confusion with an overcurrent of another nature, 
according to the invention, are the following: l)alarm de- 
rived from the state of the converter DC/DC;2)constant 
sensing of the voltage at posts of the lower-voltage-level 
battery Bl;3)changes of current in the lower-voltage- 1 eve I 
battery Bl. 

[0017] All the above conditions must be met and the order or se- 
quence thereof is mandatory in order to achieve the mini- 
mum and necessary conditions for identifying a short- 
circuit. 

[0018] According to the typical structure and functionality, a 
converter DC/DC stops the conversion process in case 
voltage at the input and the output thereof are outside a 
certain, pre-set range. The converter constantly detects 
(by means of analog wiring during at least 2 ms) for the 
voltage at the input to be in the range of 30 to 58 V 
(specification for the voltage of the 42V power source) 
and that the output is between 9V and 21V (suggested 
voltage for the specification of the 14V power source). A 
module SMM in charge of short-circuit monitoring, 



preferably associated to a battery Bl at the lower voltage 
level, will be advantageously informed by a direct connec- 
tion (in order to avoid delays derived from a shared com- 
munications network) about said abnormal situation. A 
specific voltage detector for the power supply source B2 
at the higher voltage level is not considered necessary due 
to the use of said feature of the converter DC/DC. 

[0019] Once by means of the information given by the converter 
DC/DC, it is known that an alteration in the voltage values 
in both power supply sources has occurred, sensing of a 
redundant voltage, as close as possible to the power sup- 
ply source Bl at the lower voltage level, during a specified 
time that clearly identifies a constant overcurrent situa- 
tion, is proposed. Knowledge of the loads is necessary to 
determine this time (a time of around 1 ms is suggested). 
Said module SMM will check this information and com- 
plete the short-circuit sensing process. 

[0020] |f the converter DC/DC is disconnected, it is not possible 
that charging from the power supply source or battery Bl 
at low voltage level occurs. Therefore, if said module SMM 
senses a change of current in the load of said power sup- 
ply source Bl, this is a clear indication that a short-circuit 
has been established (the accuracy in the sensing of this 



current is not important since it is enough to verify that a 
certain degree of current charging the source exists). 

[0021] |f a || the above conditions have been sensed by the SMM, 
then it is proceeded to inform the microcontrollers of the 
different power distribution units of the architecture about 
it (by means of e.g. sending a priority interruption) so that 
they perform a short-circuit protection that essentially will 
comprise disconnecting the power loads and/or an in- 
spection thereof disconnecting those that show anoma- 
lies, and eventually disconnecting battery B2 at the higher 
voltage level, and even battery Bl. 

[0022] The invention will be described below as well as diverse 
variants of the referred short-circuit protection process, 
with greater detail, with reference to some drawings illus- 
trative of a way of implementing it, provided by way of 

example only. 
Brief Description of Drawings 

[0023] pig. 1 is a schematic diagram of the operative principles 
proposed by the invention, showing in addition those ba- 
sic parts of the system and method, i.e. the converter DC/ 
DC, batteries Bl, B2, generator C, short-circuit monitoring 
module SMM, power distribution units PDU, and commu- 
nications network N. 



[0024] pig. 2 is a representation, likewise simplified, that shows a 
power distribution system comprising two batteries Bl, B2 
and three power distribution units or boxes, situated in 
different areas, e.g. in the front portion FPDU, in the rear 
portion RPDU, and in the middle portion MPDU of an au- 
tomotive vehicle. The first two ones include a first part 
that governs power loads and a second part intended for 
loads fed from the network at a lower voltage level, whilst 
the third one is only provided for loads at the lower volt- 
age level. Each one of the energy distribution boxes com- 
prises a control microcontroller. 
Detailed Description 

[0025] Figure 1 shows an electric power distribution architecture 
at two voltage levels, comprising at least a first battery Bl 
at a first 12V voltage level and a second battery B2 at a 
second, higher 36V voltage level, both provided with an 
automatic disconnection device and intended for differen- 
tiated supply of electric power to respective network sec- 
tors provided with units for distributing power to the 
loads, which units are schematized by a single PDU unit or 
assembly, controlled by a corresponding microcontroller. 
As can be seen, said first battery Bl and sector or sectors 
it supplies can be fed in turn from the second battery B2 



through a converter DC/DC, whilst the second battery B2 
and network at a higher voltage level are connected to a 
voltage generator G, such as e.g. an automobile's alterna- 
tor. 

[0026] According to the invention, said first, lower-voltage-level 
battery Bl has a module SMM associated to it, based on a 
microcontroller applied to monitoring the voltage and 
current (essentially, the direction of the current) at the 
posts of this battery Bl and to permanently sensing a 
state of operation of the converter DC/DC. On the other 
hand, said monitoring module of battery Bl in turn is 
connected, through a port of its micro-controller and a 
communications network N, to each one of the control 
microcontrollers of the power distribution units to the 
loads in order to, facing a short-circuit situation sensed 
by said monitoring module based on some sensed, prede- 
termined values of voltage, current, and state of the con- 
verter DC/DC, inform to each one of the microcontrollers 
of said power distribution units so that they perform a 
short-circuit protection process. 

[0027] input arrows to module SMM indicate information that it 
permanently monitors for: state of the converter DC/DC, 
voltage at posts of battery Bl, and eventual load current 



to said battery Bl at a lower voltage level. On the other 
hand, communications network N, depicted by dashed 
lines, indicates intercommunication between said module 
SMM and converter DC/DC, batteries Bl, B2, and power 
distribution units PDU. Output arrows from module SMM 
indicate information and/or commands that said module 
sends to the microcontrollers in charge of the PDUs, as 
well as the eventual disconnection commands to batteries 
B2 and even Bl. 
[0028] said short-circuit protection process comprises several 
action alternatives to be performed on the part of the 
power distribution units once module SMM has sent an in- 
terruption to the microcontroller of the corresponding 
unit, basically consisting in a disconnection of the charges 
and/or check/inspection thereof, after execution of which, 
and if the short-circuit situation persists, said module 
SMM may order the disconnection of battery Bl and even 
of battery B2. 

[0029] The method of the present invention, which is applied by 
means of the system described in relation to Fig.l, is de- 
scribed in relation with the example illustrated in Fig. 2. 

[0030] Thus, the first battery Bl at a first 12V voltage level and 
the second battery B2 at a second 36V voltage level are 



shown in Fig. 2. In this example, both batteries Bl and B2 
are provided with a corresponding automatic disconnec- 
tion device SDB, a monitoring module of the state of 
charge SOC and of the state of health SOH, and a control 
node CN. Each battery Bl, B2 is intended for a differenti- 
ated supply of electric power to respective network sec- 
tors provided with power distribution units 10, 20, 30 to 
the loads. First battery Bl and sector or sectors it feeds, is 
susceptible of being fed in turn from second battery B2 
through a converter DC/DC, whilst battery B2 is connected 
to a voltage generator G, such as the vehicle's alternator. 
Control node CN associated to battery Bl takes on, in Fig. 
2, the functions of said module SMM applied to sensing 
the operative state of said converter DC/DC and to subse- 
quent monitoring in case said state is a stoppage of the 
conversion process of the voltage and current at the posts 
of said battery Bl. 
[0031] Each power distribution unit 10, 20, 30 is controlled by a 
corresponding microcontroller 10a, 20a, 30a. In the illus- 
trated example, distribution unit 10 has just one sector 
MPDU dedicated to the loads situated in the middle por- 
tion of an automotive vehicle, which are at 14V and have 
been symbolized as a lamp 12 protected by a fuse 11. In- 



stead, distribution units 20 and 30, which are respectively 
intended for the loads in the front and rear portions of the 
automobile, have each one a respective sector FPDU, RPDU 
provided for feeding the loads at 14V, symbolized by 
lamps 22, 32 protected by respective fuses 21, 31, and a 
respective sector FPDU, RPDU for feeding the loads 23, 33 
at 42V which have associated corresponding power 
switches 23a, 33a for controlling said loads, such as ei- 
ther FET power switches with current sensing or power re- 
lays. 

[0032] Communications of control node CN of battery Bl, repre- 
sentative of short-circuit monitoring module SMM, with 
node CN of second battery B2 and with the different mi- 
crocontrollers 10a, 20a, 30a of the power distribution 
units 10, 20, 30 are preferably carried out through a dedi- 
cated network N, although a shared bus, such as a CAN 
bus, may be likewise used. 

[0033] The method according to the invention basically com- 
prises performing a permanent monitoring of the state of 
converter DC/DC that interrelates said two batteries Bl 
and B2, as well as at least the voltage and/or current at 
the posts of said battery Bl. In case of sensing a stoppage 
of the conversion process of the converter DC/DC, and af- 



ter this, it occurs that said voltage value exceeds a certain 
threshold, and that said current is an input current to bat- 
tery Bl, node CN informs immediately through said dedi- 
cated communications network N or CAN bus to each one 
of the microcontrollers 10a, 20a, 30a of said power distri- 
bution units 10, 20, 30 so that they perform a short-cir- 
cuit protection process. 
[0034] Thus, the method's initial step comprises proceeding, in 
an ordered and sequential manner, in the sensing of the 
condition of the converter DC/DC, acquiring the voltage at 
the posts of the 12V battery Bl and, finally, sensing a 
possible load current of said battery Bl and, only if the 
predetermined values of said two voltage and current 
measurements (in this last case, basically sensing an input 
or load current of battery Bl) fall within some pre-set 
ranges, proceeding to inform the power distribution units 
of an eventual short-circuit situation by sending an inter- 
ruption to the corresponding microcontrollers 10a, 20a, 
30a so as to initiate a short-circuit protection algorithm 
or process. 

[0035] According to a first variant, a short-circuit protection pro- 
cess to be carried out by the power distribution units, es- 
sentially those 20, 30 which have associated power loads 



23, 33, when their microcontrollers 20a, 30a receive said 
interruption, comprises a total disconnection of all said 
power loads 23, 33 and, in case a short-circuit situation 
continues being sensed (by assessment of three previ- 
ously mentioned conditions) from said monitoring module 
or node CN of battery Bl, sending a signal through said 
communications network N for disconnection of at least 
the battery B2 of higher voltage level (36V) is proceeded 
with, accessing the disconnection device SDB of said bat- 
tery B2 or the microcontroller of the control node CN as- 
sociated with said battery B2. 

[0036] | n the event that said complete disconnection of the loads 
leads to a non-short-circuit situation, as evaluated by 
said monitoring module, then a one-at-a-time reconnec- 
tion of power loads 23, 33 of each power distribution unit 
20, 30 is proceeded with until sensing of the load or loads 
susceptible of generating said short-circuit situation, as 
evaluated by said monitoring module, the load of which is 
disabled until its repair or substitution. 

[0037] However, as an option, prior to performing reconnection 
of each one of said power loads, it is possible to perform 
a prior step consisting of a voltage or impedance mea- 
surement at the output of each power switch 23a, 33a ap- 



plied to controlling the respective load, and in case the 
measured values exceed a certain threshold, said charge 
is left inactive. 

[0038] The short-circuit protection process of the present inven- 
tion comprises, according to another variant, progres- 
sively disconnecting all power loads 23, 33 associated to 
each one of the power distribution units 20, 30, and 
checking from said monitoring module or node CN of bat- 
tery Bl if a certain disconnection makes the short-circuit 
situation stop. If that is the case, disconnection of the in- 
volved load is proceeded with. If at completion of the dis- 
connection of all the power loads 23, 33 of each power 
distribution unit 20, 30 a short-circuit situation continues 
being sensed from said node CN of the monitoring mod- 
ule, a signal for disconnecting at least higher-volt- 
age-level battery B2 is sent through said communications 
network N, accessing in order to doing so disconnection 
device SBD of said battery B2 or the microcontroller of a 
control node CN associated with said battery B2. 

[0039] still another different possibility for the short-circuit pro- 
tection process of the present invention comprises super- 
vising current demand of some controlling devices, such 
as a power switch 23a, 33a, associated to each one of the 



power charges 23, 33 dependent on each one of the 
power distribution units 20, 30, and disconnecting those 
loads in which said demand exceeds a certain threshold 
and, then, in case a short-circuit situation continues being 
sensed from said monitoring module, after completion of 
the supervision of all the power loads of each power dis- 
tribution unit, a signal for disconnecting at least higher- 
voltage-level battery B2 is sent through said communica- 
tions network N, accessing in order to doing so the dis- 
connection device SDB of said battery B2 or the microcon- 
troller of a control node CN associated with said battery 
B2. 

[0040] Given that power distribution units 10, 20, 30 comprise 
some devices such as some switches 23a, 33a with cur- 
rent sensing, associated with each one of the power loads 
23, 33, the power switches 23a, 33a of which are con- 
trolled from the corresponding microcontroller 20a, 30a 
of the corresponding unit 20, 30, the invention proposes 
in an initial phase and prior to proceeding with the dis- 
connection of the power loads, a prior phase of sensing of 
the output state of each one of said switches 23a, 33a, 
particularly their voltage or impedance, so that if the 
sensed value in a certain power switch 23a, 33a exceeds a 



certain threshold, connection of the load associated 
therewith is not proceeded with anymore. E.g. in case a 
short-circuit between the 42V load and a 14V circuit ex- 
ists, the output voltage of the corresponding FET associ- 
ated to said load will be 14V instead of OV (ground). 
Thereby, prior to connecting this load, the system may be 
informed of a potential short-circuit that could damage 
the power distribution system. This sensing only verifies 
circuits fed at 14V. This solution is easily implemented 
and the accuracy of said measurement might be of 10% 
because the mere sensing of the existence of a voltage is 
a clear indication of a possible fault in the circuit. In the 
event that the circuit associated to the 14V load is discon- 
nected, sensing of a voltage level would not avoid the 
short-circuit. Therefore, characterization of the 
impedance of the loads is proposed, so that prior to con- 
nection of the load, an out-of-range impedance could be 
sensed, indicative of a short-circuit risk. 
[0041] As indicated, whichever the action variant chosen, if after 
the execution of said short-circuit protection process by 
each one of said power distribution units 20, 30 in rela- 
tion with the power loads 23, 33 involved, node CN of the 
monitoring module associated with battery Bl continues 



sensing a short-circuit situation, disconnection of battery 
B2 or even battery Bl from their corresponding sectors of 
the network they feed is proceeded with. 
[0042] a s f or the latency (time period from sensing until solving 
a short-circuit event) of the proposed action, the different 
steps of the method have to be considered: l)sensing: in- 
formation about a state of stoppage of the converter DC/ 
DC, together with the acquisition of the voltage and cur- 
rent values at the posts of battery Bl, can take less than 2 
ms, and generating, from the microcontroller of the node 
CN of said battery Bl, an interruption to the microcon- 
trollers 10a, 20a, 30a of the power distribution units can 
last approximately 500 ms. Therefore, time of sensing may 
be close to 2.5 ms;2)execution of an algorithm of sensing 
of the load involved or causing the short-circuit situation, 
by each one of the power distribution units or boxes 10a, 
20a, 30a, basically depends on the programming of the 
interruption in the respective microcontroller 10a, 20a, 
30a and on the circuits of the FET devices 23a, 33a with 
current sensing, being able to estimate it between 250 ms 
and 500 ms; and3)disconnection of the FET devices 23a, 
33a, around 500 ms (depending on the FET power transis- 
tor used). 



Thus, the time of latency will be in the range of 4 ms, at 
worst below 10 ms, which is a time that allows to avoid 
burning of the cables or fuses. 



